Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Advertisements

pomp

Posted 24 March 2005 - 10:20 PM

pomp

the man

Member

1,366 posts

You are using an outdated version of HijackThis. Please download HijackThis version 1.99.1 from here:http://www.downloads.../hijackthis.zipand make sure to unzip it to a permanent folder. Then please run HijackThis, click Scan and Save log, and post the new log here. I would be happy to take a look at it.

pomp

Posted 25 March 2005 - 12:13 AM

pomp

the man

Member

1,366 posts

Please read through the instructions before you start (you may want to print this out).

Please download and install these programs - don't run them yet!!

Please download and unzipAbout:Buster to a folder. Inside the folder is a readme file that has instructions on the use of the program.AboutBuster MUST be updated before you use it.Start AboutBuster, click the update button, check for update, drag the box to the side and hit download updates, close the box . Don't run it yet.

Please download and install AD-Aware.Check Here on how setup and use it - please make sure you update it first.

Open Windows Explorer & Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked.Also uncheck "Hide protected operating system files" and untick "hide extensions for known file types" . Now click "Apply to all folders"Click "Apply" then "OK"

For anyone using Windows XP, 'Search' will not automatically show hidden files even if your folder options settings are set to do that. Do this so you can see hidden files and folders - click here http://www.davehigha...ds/xphidden.zip to download xphidden.zip. Extract xphidden.reg from the zip file and save it to the desktop. When done, double-click the xphidden.reg and when asked to merge say yes.

Please download WinHelp2002's DelDomains by right-clicking on the following link, and choosing "Save Target As":http://www.mvps.org/.../DelDomains.infSave the file to the desktop. Then go to the desktop, right click on DelDomains.inf, and choose Install. You may not see any noticeable changes or prompts; this is normal. Then please restart your computer.

+++++++++++++++++++++++++++++++++++++++++++++++++

Here's the fix:

Important Step1. Go to Start->Run and type "Services.msc" (without quotes) then hit OkScroll down and find the service called:

Network Security Service

When you find it, double-click on it. In the next window that opens, click the Stop button, then click on properties and under the General Tab, change the Startup Type to Disabled. Now hit Apply and then Ok and close any open windows. If you don´t find this service listed go ahead with the next steps.

4. Delete the following files if present:If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. if it is uncheck it and try again.

C:\WINDOWS\sysbr.exe << This fileC:\Documents and Settings\Alan\Application Data\oeol.exe << This fileC:\WINDOWS\atlqy32.exe << This fileC:\WINDOWS\syssi32.dll << This fileC:\WINDOWS\system32\cnsaw.dll << This file

5. Run AboutBuster . This will scan your computer for the bad files and delete them. Save the report (copy and paste into notepad or wordpad and save as a .txt file) and post a copy back here when you are done with all the steps.

6. Scan with AdAware and let it remove any bad files found.

7. Clean out temporary and TIF files. Go to Start > Run and type in the box: cleanmgr. Let it scan your system for files to remove. Make sure these 3 are checked and then press *ok* to remove:

Temporary FilesTemporary Internet FilesRecycle Bin

8. Double click on the cwsserviceremove and when asked to merge say yes.

9. Run CW-Shredder - Hit the FIX button - let it run and fix what it finds.

pomp

Posted 26 March 2005 - 12:08 AM

Just please boot up into safe mode. Go to start-search-files and folders. Search for t?skmgr.exe . When it's done searching, find the file with these properties:

Date and Time: 01/11/2005 08:11 AM Size: 392 KB

When you found that file with thoes properties, DELETE IT!!!

Empty recycle bin.

Boot back into normal mode.

Everything looks great --- your HijackThis log is completely clean. Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems.

1) Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer. I cannot stress enough how important this is.

2) In order to protect yourself against spyware, you should consider installing and running the following free programs:

Ad-Aware SEA tutorial on using Ad-Aware to remove spyware from your computer may be found here.

Spybot-Search & DestroyA tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.

SpywareBlasterA tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.

IE-SPYADA tutorial on using IE-SPYAD to prevent spyware from ever installing on your computer may be found here

Keeping these programs up-to-date and running them regularly can prevent a great deal of spyware hassle.

3) Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here:http://www.mozilla.o...oducts/firefox/

4) Also make sure to run your antivirus software regularly, and to keep it up-to-date.[OR]I notice that you do not seem to be running antivirus software. This is somewhat suicidal in today's digital world. AVG makes an excellent free antivirus client; it may be downloaded here. Please make sure to run your antivirus software regularly, and to keep it up-to-date.

pomp

Posted 26 March 2005 - 08:54 AM

pomp

the man

Member

1,366 posts

hello, yes, you won't see the question mark. But I just need you to check teh properties of each file, and if one of those files has the properties of what I indicated in my previous post, then you DELETE IT!